Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
File: XNaRDPHi4rHKNHPEt9CSAg57fGE.mft (raw, json)
Hash identifier: P9zIXVAv3yKabNjpKGr4leFM1G0MNMzx9KHbuFXBEcw=
Subject key identifier: 84:5F:0E:9A:BA:9C:34:74:DA:5D:11:A7:C7:58:2B:5F:6E:37:82:17
Authority key identifier: 5C:D6:91:0C:F1:E2:E2:B1:CA:34:73:C4:B7:D0:92:02:0E:7B:7C:61
Certificate issuer: /CN=5cd6910cf1e2e2b1ca3473c4b7d092020e7b7c61
Certificate serial: 019E1FEC7B21933A787467764E304A94A066
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
Manifest number: 1898
Signing time: Wed 13 May 2026 06:00:51 +0000
Manifest this update: Wed 13 May 2026 06:00:51 +0000
Manifest next update: Thu 14 May 2026 06:00:51 +0000
Files and hashes: 1: 1-JQqdOgGI5A2jgfNA9GBznLZL4o.roa (hash: 8aD9D5dY520w/e92POgprpQwJQRjt7y1yNeMs6zlp6Y=)
2: XNaRDPHi4rHKNHPEt9CSAg57fGE.crl (hash: 7+jBXwR1FsO/VD/nd9fzBYKEWHqj8zAqy9SgvwDkpuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ec:7b:21:93:3a:78:74:67:76:4e:30:4a:94:a0:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd6910cf1e2e2b1ca3473c4b7d092020e7b7c61
Validity
Not Before: May 13 06:00:51 2026 GMT
Not After : May 14 06:00:51 2026 GMT
Subject: CN=845f0e9aba9c3474da5d11a7c7582b5f6e378217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:14:6e:5c:6a:43:24:ea:e6:15:63:ad:a6:90:
05:25:c9:b0:2f:3a:b1:62:33:05:94:62:97:c1:b1:
d7:fc:51:57:02:2d:f4:40:02:19:7c:96:25:35:a1:
3c:93:fe:23:88:b5:c3:f1:14:8d:73:4c:fe:1b:6a:
cb:c7:3f:37:b5:e7:ae:05:e4:04:cd:d5:72:8c:01:
b7:13:7e:3a:a8:63:b3:64:57:bb:2b:6f:eb:4a:29:
80:55:55:73:bb:d0:fe:77:fc:2f:b8:86:56:48:e4:
86:1b:97:b6:8a:e3:0b:04:a6:03:d8:93:f9:54:44:
be:16:74:cc:4f:42:1c:59:bc:67:17:1a:4d:df:f8:
65:93:5d:7e:a5:74:b1:81:c6:9a:9e:d2:38:41:f6:
58:3b:49:6d:7c:e7:6c:fd:39:6b:0b:3f:f4:70:37:
d8:55:41:7c:a7:8e:d2:26:87:17:eb:be:24:10:c6:
3c:31:51:b6:12:63:74:b9:64:f1:34:90:da:c1:f6:
0f:16:58:93:c5:74:15:a2:9b:f3:f1:f5:f7:ef:f0:
99:53:21:1a:97:d4:40:92:b5:82:66:e4:4c:a1:b3:
9b:d0:23:83:0f:33:38:ee:ad:2c:84:02:b4:32:5c:
7e:91:46:25:b0:86:28:93:d4:a7:ea:b0:d0:b8:a1:
c3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:5F:0E:9A:BA:9C:34:74:DA:5D:11:A7:C7:58:2B:5F:6E:37:82:17
X509v3 Authority Key Identifier:
keyid:5C:D6:91:0C:F1:E2:E2:B1:CA:34:73:C4:B7:D0:92:02:0E:7B:7C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:85:ad:e8:61:a7:1b:52:2d:95:b6:f4:3d:55:b1:b3:48:6a:
b8:2d:f3:e5:b1:c4:93:de:2a:15:10:87:96:ba:91:c9:fe:da:
ce:81:25:3a:60:26:50:33:67:bd:7d:43:d3:16:48:b7:e1:89:
a7:1e:d3:eb:ad:90:57:74:f1:80:8e:fd:ec:f4:5a:2c:65:4f:
f1:ab:1d:d4:bb:29:59:d8:41:2b:fd:f0:4a:92:e8:0a:0b:03:
91:b9:84:3e:6c:39:03:d3:81:eb:e9:2d:08:86:3c:0c:64:4d:
67:02:78:f6:be:cb:e1:c0:5d:89:e8:c7:59:92:40:cb:ac:8c:
ba:3a:67:d7:60:0f:8f:88:a7:7d:4e:4c:43:48:b8:ab:b8:a5:
62:5b:ae:34:e4:71:6e:c4:05:f4:04:00:b4:25:07:d4:20:0c:
15:ec:41:42:61:62:38:59:76:39:8a:aa:59:c8:a6:f6:98:05:
81:41:62:1f:90:09:01:61:61:b8:c6:38:8f:03:39:e1:44:09:
32:dc:02:f3:48:f0:4c:de:8f:b0:dd:ce:9b:73:0b:b6:15:ad:
0b:c4:f1:df:0d:c0:c8:34:2f:81:f4:4f:ca:05:04:3d:bd:59:
11:c4:32:28:bb:7c:63:b8:7c:4c:aa:5a:49:52:eb:79:d4:59:
dc:43:3e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:31:54 2026 by rpki-client